Approved changes feed: RSS · Atom
cpe:2.3:a:doas_project:doas:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Doas Project (22639967-b2fd-54cb-8f8b-597f7a53dea4) |
|---|---|
| Product | Doas (410408a1-2cd0-5619-b67f-ae2a92773b74) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/slicer69/doas |
purl2cpe | 2026-06-01 10:15:26.495205 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15901 |
vulnerable | 2026-06-08 05:12:58.193304 |
Details available
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
Published: 2019-10-18T15:44:17.000Z
Updated: 2024-08-05T01:03:31.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15900 |
vulnerable | 2026-06-08 05:12:58.192767 |
Details available
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root.
Published: 2019-10-18T15:41:48.000Z
Updated: 2024-08-05T01:03:32.412Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.